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Architecture for Protecting Critical Secrets in Microprocessors 
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We propose "secret-protected (SP)" architecture to enable secure and convenient 
protection of critical secrets for a given user in an on-line environment. Keys are 
examples of critical secrets, and key protection and management is a fundamental 
problem L often assumed but not solved i underlying the use of cryptographic protection 
of sensitive files, messages, data and programs. SP-processors contain a minimalist set of 
architectural features that can be built into a general-purpose microprocess ... 

Security as a new dimension in embedded system design: Security as a new 
dimension in embedded system desig n 

Srivaths Ravi, Paul Kocher, Ruby Lee, Gary McGraw, Anand Raghunathan 

June 2004 Proceedings of the 41st annual conference on Design automation DAC '04 

Publisher: ACM Press 
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Full text available: ■Q pdf(209.10 KB^ 



The growing number of instances of breaches in information security in the last few years 
has created a compelling case for efforts towards secure electronic systems. Embedded 
systems, which will be ubiquitously used to capture, store, manipulate, and access data of 
a sensitive nature, pose several unique and interesting security challenges. Security has 
been the subject of intensive research in the areas of cryptography, computing, and 
networking. However, despite these efforts, security is ... 

Keywords: PDAs, architectures, battery life, cryptography, design, design 
methodologies, digital rights management, embedded systems, performance, security, 
security processing, security protocols, sensors, software attacks, tamper resistance, 
trusted computing, viruses 
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Our growing reliance on online services accessible on the Internet demands highly 
available systems that provide correct service without interruptions. Software bugs, 
operator mistakes, and malicious attacks are a major cause of service interruptions and 
they can cause arbitrary behavior, that is, Byzantine faults. This article describes a new 
replication algorithm, BFT, that can be used to build highly available systems that tolerate 
Byzantine faults. BFT can be used in practice to implement re ... 

Keywords: Byzantine fault tolerance, asynchronous systems, proactive recovery, state 
machine replication, state transfer 
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Performance asymmetry in multicore architectures arises when individual cores have 
different performance. Building such multicore processors is desirable because many 
simple cores together provide high parallel performance while a few complex cores ensure 
high serial performance. However, application developers typically assume computational 
cores provide equal performance, and performance asymmetry breaks this assumption. 
This paper is concerned with the behavior of commercial applications runn ... 
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November 2006 Proceedings of the first ACM workshop on Scalable trusted computing 
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Publisher: ACM Press 

Full text available: ^ pdf(447.59 KB ) Additional Information: full citation , abstract , references , index terms 

A trusted monotonic counter is a valuable primitive that enables a wide variety of highly 
scalable offline and decentralized applications that would otherwise be prone to replay 
attacks, including offline payment, e-wallets, virtual trusted storage, and digital rights 
management (DRM). In this paper, we show how one can implement a very large number 
of virtual monotonic counters on an untrusted machine with a Trusted Platform Module 
(TPM) or similar device, without relying on a trusted OS ... 

Keywords: certified execution, e-wallet memory integrity checking, key delegation, 
stored-value, trusted storage 
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Flash memory is the most prevalent storage medium found on modern wireless sensor 
devices (WSDs). In this article we present two external memory index structures for the 
efficient retrieval of records stored on the local flash memory of a WSD. Our index 
structures, MicroHash and MicroGF (micro grid files), exploit the asymmetric read/write 
and wear characteristics of flash memory in order to offer high-performance indexing and 
searching capabilities in the presence of a low- ... 

Keywords: Wireless sensor networks, access methods, flash memory 



BASE: Usin g abstraction to improve fault tolerance \ 
Miguel Castro, Rodrigo Rodrigues, Barbara Liskov 

August 2003 ACM Transactions on Computer Systems (TOCS), volume 21 issue 3 
Publisher: ACM Press 

Full text available* I 51 ! pdf(438,18 KB) Additional Information: full citation , abstract , references , citings , index 

terms 

Software errors are a major cause of outages and they are increasingly exploited in 
malicious attacks. Byzantine fault tolerance allows replicated systems to mask some 
software errors but it is expensive to deploy. This paper describes a replication technique, 
. BASE, which uses abstraction to reduce the cost of Byzantine fault tolerance and to 
improve its ability to mask software errors. BASE reduces cost because it enables reuse of 
off-the-shelf service implementations. It improves availability ... 

Keywords: Byzantine fault tolerance, N-version programming, asynchronous systems, 
proactive recovery, state machine replication 
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annual international symposium on Computer Architecture ISCA '06, volume 
34 Issue 2 

Publisher: IEEE Computer Society, ACM Press 

Full text available: pdf(536. 54 KB ) Additional Information: full citation , a bstract , index terms 

This paper presents a high-availability system architecture called INDRA an INtegrated 
framework for Dependable and Revivable Architecture that enhances a multicore 
processor (or CMP) with novel security and fault recovery mechanisms. INDRA represents 
the first effort to create remote attack immune, self-healing network services using the 
emerging multicore processors. By exploring the property of a tightly-coupled multicore 
system, INDRA pioneers several concepts. It creates a hardware insulati ... 




9 Pen computing: a technology overview and a vision 
Andre Meyer 

July 1995 ACM SIGCHI Bulletin, Volume 27 issue 3 
Publisher: ACM Press 

Full text available:^ pdf( 5. 14 MB ) Additional Information: full citation , abstract , citings, index terms 

This work gives an overview of a new technology that is attracting growing interest in 
public as well as in the computer industry itself. The visible difference from other 
technologies is in the use of a pen or pencil as the primary means of interaction between 
a user and a machine, picking up the familiar pen and paper interface metaphor. From 
this follows a set of consequences that will be analyzed and put into context with other 
emerging technologies and visions. Starting with a short historic ... 
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Publisher: ACM Press 

Full text available* 1S| pdf(264 30 KB) Addit ' onal Information: full citation , abstract , references , citing s, index 
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We propose a primitive, called Pioneer, as a first step towards verifiable code execution 
on untrusted legacy hosts. Pioneer does not require any hardware support such as secure 
co-processors or CPU-architecture extensions. We implement Pioneer on an Intel Pentium 
IV Xeon processor. Pioneer can be used as a basic building block to build security 
systems. We demonstrate this by building a kernel rootkit detector. 

Keywords: dynamic root of trust, rootkit detection, self-check-summing code, software- 
based code attestation, verifiable code execution 
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Now in segment nine we look at memory, video, and the PC bus. This is a bit more than I 
had planned, but with the changes coming up in SIGICE, I want to finish the remaining 
topics. 
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